https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:16:56.551885+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/drupal-contrib-2026-012 DRUPAL-CONTRIB-2026-012 2026-10-03T18:16:56.611930+00:00

Affected: Packagist:https://packages.drupal.org/8: drupal/theme_rule

This module allows site builders to create so-called "theme\_rule" config entities. These theme rules can render pages with different themes than the default when certain conditions match.

The module uses simple GET request to disable or enable theme rules, which allows attackers to disable or enable theme rules by tricking site administrators to click on links.

This vulnerability is mitigated by the fact that an attacker must know the machine name of the theme rule.

 https://cve.radiocsirt.org/vuln/euvd-2026-277550 EUVD-2026-277550 2026-10-03T18:16:56.611993+00:00 EUVD-2026-277550 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3211 fkie_cve-2026-3211 2026-10-03T18:16:56.612010+00:00

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Theme Negotiation by Rules allows Cross Site Request Forgery.This issue affects Theme Negotiation by Rules: from 0.0.0 before 1.2.1.

 https://cve.radiocsirt.org/vuln/ghsa-rf5j-2h6w-f75m GHSA-rf5j-2h6w-f75m 2026-10-03T18:16:56.612035+00:00

Cross-Site Request Forgery (CSRF) vulnerability in Drupal Theme Negotiation by Rules allows Cross Site Request Forgery.This issue affects Theme Negotiation by Rules: from 0.0.0 before 1.2.1.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0530 WID-SEC-W-2026-0530 — Drupal Extensions: Mehrere Schwachstellen 2026-10-03T18:16:56.612050+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in verschiedenen Drupal Extensions ausnutzen, um Cross-Site-Scripting-Angriffe zu starten, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.